Golang Job: Senior Incident Response Engineer EMEA

Responsibilities

• Can clearly communicate the Incident Response Lifecycle and the Kill Chain (Attack) Life Cycle to internal and external stakeholders
• Serve as point of contact throughout the incident lifecycle, interacting directly with executives, and legal.
• Extend Security Incident Response framework, capabilities responsibilities
• Assist in broadening Security Incident Response scope into Product Security, Legal and Insider Threat.
• Effectively communicate investigative findings and impact to wide array of stakeholders including executive leadership
• Partner with the team members across two regions to drive response and investigations globally.
• Produce concise yet detailed case reports for internal and external partners.
• Assist in planning and strategizing program initiatives and milestones to mature incident response capabilities
• Participate in the creation, and maintenance Incident Response Standards, Policies, Procedures, Guidelines, and Checklists
• Empathize, reassure, and respond to sensitive incidents with compassion, professionalism, and clarity
• Train less experienced members of the team on best practices, processes, and technologies

Requirements

• 5+ years of demonstrated experience in digital forensics incident response investigations, litigation support investigations, security engineering, log aggregation, and/or penetration testing
• Minimum of 2 years leading incident response engagements or efforts in enterprise and production environments
• Broad understanding of data loss prevention and insider threat prevention concepts, technical expertise, and analytical capabilities to detect patterns and anomalies across data sets of technical and non-technical indicators.
• Litigation discovery experience, including data preservation, collection, scoping and review of data from a broad array of repositories and systems, including proprietary systems
• Deep knowledge of malicious insider threat indicators, such as those associated with fraud, theft of intellectual property, sabotage, and espionage.
• Solid understanding of network and system intrusion and detection methods; examples of related technologies include, Splunk, Kibana, Timesketch, GRR Rapid Response, Velociraptor, OSQuery, Next Generation Endpoint Protection Platforms (EPP), Security information and event management (SIEM), hacking tools techniques and procedures
• Experience with coding and analytics, malware analysis, endpoint lateral movement detection methodologies and host forensic tools
• Understanding of network protocol analysis, public key infrastructure, SSL, Microsoft Windows, MacOS, Linux, open-source software, scripting, SQL and software programming
• Strong troubleshooting, organizational skills, and capacity to work on multiple activities simultaneously
• Great verbal/written communication, problem solving, analytical and independent judgment skills to support an environment driven by teamwork; must be able to positively influence, mentor and be a credible source of knowledge to less experienced team members

Preferred Qualifications

• Forensic tool development and automation
• Malware Reverse Engineering
• SALT, Ansible, Puppet, Chef, and/or Terraform experience.
• Experience with industry security baselines such as CIS and NIST 800-53+
• Python, SQL, GoLang
• GCFA, GCFR, GNFA Certifications